Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File:                     A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier:          Tlx4Wafn6noMXkMK+Ohz8Hn1XpSXYSfwTvO0/L5kQB0=
Subject key identifier:   FA:22:A1:53:BA:30:FB:87:48:C4:FD:D9:27:DC:15:DC:C0:F0:A0:AC
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer:       /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial:       019FAA50DBC1908EF1A794F71D73DB12DA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number:          0793
Signing time:             Tue 28 Jul 2026 20:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:53 +0000
Files and hashes:         1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
                          2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: HI2CqlOhy5AIqr2ZQx0I6rIgh91R0VOpGUm3PE+df4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:db:c1:90:8e:f1:a7:94:f7:1d:73:db:12:da:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
        Validity
            Not Before: Jul 28 20:00:53 2026 GMT
            Not After : Jul 29 20:00:53 2026 GMT
        Subject: CN=fa22a153ba30fb8748c4fdd927dc15dcc0f0a0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:5a:6c:ba:a0:a8:a7:4e:c7:9e:43:22:43:
                    ba:e3:e2:34:fe:95:fe:dd:7f:9a:5a:ec:42:bd:49:
                    44:ec:9b:72:62:a1:3a:8f:d5:e0:94:7c:83:68:6d:
                    5d:1c:a9:86:2f:b8:b6:ec:ca:59:d3:5e:aa:6c:db:
                    35:0c:08:d6:60:28:3e:37:5c:58:65:ad:64:d5:a4:
                    3e:a5:68:9b:45:d2:1c:2a:c7:e5:13:95:7e:77:19:
                    fd:d0:63:22:ed:45:86:7c:72:98:24:4d:92:f4:69:
                    bf:00:35:e6:99:c4:b3:2a:83:95:4d:de:5e:7e:4d:
                    55:2f:d7:f0:29:b1:63:25:d3:8e:41:17:10:bd:eb:
                    ac:15:c2:e9:91:7a:37:ce:43:bf:23:88:43:0b:35:
                    b4:33:54:a3:ab:93:eb:34:22:f4:38:99:4a:d8:da:
                    09:d6:d1:ab:9d:37:d3:43:44:9b:35:99:8c:90:6c:
                    65:53:df:c0:d4:7d:bb:44:31:98:2d:a2:b4:ce:8b:
                    23:f7:1e:f3:7a:65:2f:7d:69:30:b0:db:65:5e:30:
                    9b:a2:7b:01:9a:2f:16:9e:55:d2:87:fd:aa:c0:f2:
                    13:15:e2:17:d9:19:94:5b:fb:d4:13:55:76:ef:9d:
                    09:02:dc:99:21:1d:77:6a:a4:39:5c:25:55:64:7e:
                    3c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:22:A1:53:BA:30:FB:87:48:C4:FD:D9:27:DC:15:DC:C0:F0:A0:AC
            X509v3 Authority Key Identifier:
                keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:2e:cf:a5:10:6a:3f:ef:98:51:fa:b8:a1:1e:b3:4f:92:95:
         64:98:99:d5:7d:e5:b3:98:ba:ca:05:48:7f:e1:8f:da:f3:fa:
         f0:6d:73:53:bd:1a:cd:97:fa:66:fa:ba:31:f0:bf:88:65:a9:
         a7:4d:de:ff:0b:58:37:05:36:1e:27:54:59:29:6f:11:81:c1:
         a5:bf:88:3c:b2:f1:a7:05:75:d3:94:69:d2:07:41:7a:58:6a:
         b9:2b:e7:eb:53:3e:2f:ca:bd:fe:bc:13:0a:98:79:6f:50:cf:
         23:4d:10:1b:ee:47:e4:c9:a9:e5:14:a5:b3:bf:d3:92:2f:96:
         1d:20:4b:44:39:5a:47:48:a4:15:cd:58:75:c6:19:57:b7:ec:
         6c:b9:45:c3:e8:b5:00:32:32:52:ec:be:1c:58:79:ef:59:1d:
         e1:0e:63:3e:05:93:1a:1c:a9:10:81:fa:74:e6:ac:b1:bf:1e:
         2b:77:36:54:7e:80:e6:02:42:c1:49:9d:6c:fa:a9:e2:62:6f:
         21:84:a7:78:8d:45:41:3d:1a:93:df:26:6a:a2:6a:d8:a9:41:
         1d:44:02:5d:a8:c4:0a:1c:65:53:cf:1f:7e:e9:b8:3b:9a:d7:
         b1:48:37:c7:50:7b:a4:4c:07:f7:71:db:f7:87:b0:ec:fb:94:
         ca:dd:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:19 2026 by rpki-client